Privacy Notice

1. Purpose

We are ALDREES Petroleum & Transport Service Company (hereinafter referred to as “ALDREES”). We collect and process various types of data obtained directly from you or from other sources. Your personal data is important to us, and we want to ensure you know how we use and protect it. Personal data is information that either identifies you or is about you as an individual.

This Privacy Notice describes how ALDREES collects, shares, processes, uses, and protects your personal data within the Kingdom of Saudi Arabia. We’ll also inform you about your rights and how you can exercise them.

Please read this Website Privacy Notice carefully before exploring our website (https://www.aldrees.com) (“Website”), which is owned and operated by ALDREES (also referred to as “we,” “us” and “our”). In this notice, “You” or “Your” refers to a data subject (i.e., any website visitor) whose personal data is processed by ALDREES.

We’ll update this privacy notice from time to time. You can find the current version and date listed at the end of this privacy notice. If you have any questions or concerns about your personal data, please don’t hesitate to get in touch (you can find our details under ‘Contact Us’ below).

2. How Does ALDREES Collect Your Personal Data

2.1 Direct Interactions

• Recording your interactions with us, such as emails, other correspondence, and any instructions you provide;
• Providing feedback through the contact section on our website;
• Sharing your Personal Data, including your resume, for recruitment purposes either through our website or via LinkedIn;
• Interacting with us on social media platforms such as LinkedIn, Instagram, X and YouTube, etc.

2.2 Indirect Interactions through Cookies

Log Files: Log information refers to data related to your use of the service, such as IP address, browser type, referring/exit pages, operating system, date/time stamps, and other related data, which is stored in log files.

Cookies: To enhance the user experience, our websites use standard technology known as "cookies" to gather information about how they are utilized, which may include your data. The use of cookies is essential for the proper functioning of the website.

Cookies may be used for various purposes, including remembering your preferences, browsing actions, and patterns, and gaining a better understanding of how you interact with our website. They also help monitor visitor usage and manage online traffic routing. You can adjust browser settings to stop accepting cookies or to prompt you before accepting cookies from websites. However, if you choose not to accept cookies, you may not be able to use all features or functionalities of our website. Please refer to the “Cookie Policy” section below for more details.

3. What Personal Data Does ALDREES Collect?

• Data collected through application forms, questionnaires, or other documents or communications, such as the full name, date of birth, and ID numbers.
• Data collected from your use of ALDREES’s websites, or mobile apps (such as cookies).
• Data exchanged during ALDREES’s communication with you, such as customer service requests and feedback received from you, either through ALDREES’s websites, mobile apps, social media accounts, or any channel ALDREES uses to communicate with customers.
• Data collected through recruitment-related documents and communications from candidates, such as personal details (full name, date of birth, contact information), employment history, qualifications, and other materials like resumes, cover letters, interview notes, references, and test results.

3.1 Sensitive Personal Data

• Information about your race or ethnicity, religious beliefs;
• Information about your health, including any medical condition or sickness records;
• Any criminal records information in relation to you;
• Biometric information about you, for example, fingerprints and facial and retina scans.

ALDREES’s intent is not to collect or process any Sensitive Personal Data about you unless required by applicable laws. However, in certain circumstances, ALDREES may need to collect or request your sensitive Personal Data for employment-related purposes via resume shared, for example, gender and disabilities for the purposes of equal opportunities monitoring to comply with anti-discrimination laws and for government reporting obligations.

3.2 Consequences and Risks of Not Providing Personal Data

• Inability to process your job application: Without the necessary data, we may be unable to provide you with the services you have requested.
• Limited functionality: Certain features or functionalities, such as accessing certain areas of our websites, may be unavailable if required data is not provided.
• Inability to comply with legal or contractual obligations: In cases where the collection of personal data is required by law or contract, failure to provide such data may prevent us from fulfilling our legal or contractual responsibilities.

While you are free to withhold optional data, please be aware that this may limit our ability to engage with you or provide a personalized experience.

4. How and Why Does ALDREES Use Your Personal Data

• Information exchange – When you complete and upload a form to ALDREES’s website, mobile apps, email, or social media posts, or participate in promotional campaigns.
• Interaction (social media) – Any posts, messages, or interactions you carry out with us directly on ALDREES’s social media channels.
• Browsing patterns – Data on how you explore ALDREES’s website, the timing of your visits, the types of internet browsers you use, and how you were referred to ALDREES’s website.
• You personally or your authorized agent or legal representative.
• In legally accepted cases, from third parties and public sources. This includes government entities and credit information companies and agencies.
• Providing you with the benefits under a contractual relationship.

ALDREES may also use your Personal Data in the following situations, which are likely to be rare:

• Where ALDREES needs to protect your interests (or someone else's interests);
• Where it is needed in the public interest or for official purposes.

5. Legal Basis and Purposes for the Collection and Use Your Personal Data

• Complying with any obligations and requirements issued by legal and regulatory authorities within the Kingdom of Saudi Arabia.
• Complying with contractual obligations.
• For screening or recruitment purposes.
• Improving ALDREES’s website, and your experience across ALDREES’s channels.

ALDREES may also use your Personal Data for other purposes that are not incompatible with the purposes disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable laws.

5.1 Change of Purpose

Your Personal Data will only be used for the purposes for which it was collected unless there is reasonable justification for using it for another compatible reason. If there is a need to use your Personal Data for an unrelated purpose, you will be notified.

6. Disclosure of Your Personal Data

• Any court or any governmental or regulatory entity to comply with any obligations and requirements issued by legal and regulatory authorities within the Kingdom of Saudi Arabia.
• Any social media posts or comments you send to us will be shared under the terms of the relevant social media platform (e.g., X, and LinkedIn) on which they’re written and could be made public.
• ALDREES may share your Personal Data with third parties that are based outside the country, and so their Processing of your Personal Data will involve a transfer of data outside the country of business. Whenever ALDREES transfers your Personal Data out of the country of business, ALDREES ensures a degree of protection is maintained.

Please contact us if you want further information on how ALDREES transfers your Personal Data out of the Kingdom.

7. How Does ALDREES Protect Your Personal Data

ALDREES ensures that your data is appropriately protected using the organizational, technical, and administrative measures and precautions required to prevent unauthorized access to or collection, use, disclosure, copying, modification, or disposal of your data. ALDREES protects your data in a manner consistent with the Personal Data Protection Law (PDPL) and its implementing regulations applicable in the Kingdom of Saudi Arabia. However, you should note that the Internet is not completely secure.

In the event of a data breach, ALDREES will notify the relevant regulatory authorities (Saudi Data and Artificial Intelligence Authority - SDAIA) and affected data subjects within the legally required timeframe, as mandated by the PDPL.

8. Storage and Destruction of Personal Data

• Retained for as long as necessary to fulfill the purpose for which it was collected.
• Retained to meet any legal and regulatory requirements.
• Destroyed or anonymized in a manner that makes it impossible to identify you, in accordance with applicable laws, regulations, and industry best practices, ensuring that no unauthorized access or use of the data is possible after its retention period has expired.

9. Cookie Policy

9.1 What are Cookies?

• Cookies are small data files that are placed on your computer or mobile device when you visit a website.
• Cookies are commonly used by website owners to ensure proper website functionality, improve performance, and provide reporting data.
• Cookies set by the website owner (in this case, ALDREES) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." The parties that set these third-party cookies can recognize your computer both when it visits the website in question and when it visits certain other websites.

9.2 Why do ALDREES use cookies?

ALDREES may automatically collect certain non-identifying information about your use of the Website and E-Participation Tools, such as browser and operating system information, computer type, domain name, information collected through cookies, pixel tags, and other technologies, demographic information, and aggregated information.

9.3 Does ALDREES use social networking cookies?

No, ALDREES’s website contains links to social networking websites like Instagram, X, LinkedIn, YouTube, etc. ALDREES is not responsible for the content or cookie practices of third-party websites, and ALDREES recommends that you review their cookie policies separately.

9.4 How can visitors control cookies?

You can set or amend your web browser controls to accept or block cookies. If you choose to block cookies, you may still use ALDREES’s website, though your access to some functionality and areas of ALDREES’s website may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information.

10. What Are Your Data Protection Rights?

10.1 Your Duty to Inform Us of Changes

It is important that the Personal Data held by ALDREES about you is accurate and up to date. Please inform us of any changes to your Personal Data by updating your details on ALDREES’s website and sharing your updated information with ALDREES’s Data Protection Officer at: dpo@aldrees.com

10.2 Your Rights Under PDPL

• Right to be Informed
• Right to Access
• Right to Obtain Data in Readable Format
• Right to Data Deletion
• Right to Timely Responses
• Right to Rectify Data
• Right to Withdraw Consent
• Right to Complain

10.3 Fees for Excessive or Unreasonable Requests

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, ALDREES may charge a reasonable fee if your request for access is unfounded or excessive. Alternatively, ALDREES may refuse to comply with the request in such circumstances.

10.4 Time Limit to Respond

ALDREES try to respond to all legitimate requests within 30 days. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, ALDREES will notify you and keep you updated. If you wish to exercise any of the rights set out above, please contact our Data Protection Officer at: dpo@aldrees.com

11. What ALDREES May Need From You?

ALDREES may need to request specific information from you to help us confirm your identity and ensure you are able to exercise your rights securely. ALDREES may also contact you to ask you for further information in relation to your request to expedite its response.

12. Indemnity and Limitation of Liability

You agree to defend, indemnify, and hold harmless ALDREES, its officers, directors, and employees from and against any and all claims, liabilities, damages, losses, or expenses, including settlement amounts and reasonable legal fees and costs, arising out of or in any way connected with your access to or use of this site.

Although ALDREES shall make every attempt to keep the website free from viruses, it cannot guarantee that it is virus/malware-free. For your own protection, you should take the necessary steps to implement appropriate security measures and utilize a virus scanner before downloading any information from the website.

ALDREES, its officers, directors, and employees shall not be liable in any manner whatsoever for any direct, indirect, incidental, consequential, or punitive damage resulting from the use of, access to, or inability to use the information available on the website. ALDREES, its officers, directors, and employees shall not be liable in any way for possible errors or omissions in the contents of the website.

13. Intellectual Property Rights

All information on this website is protected by copyright and other intellectual property rights. No images, text, or other content from this website may be distributed or reproduced without prior written approval from ALDREES.

14. Contact Us

For further details regarding the processing of your Personal Data and how to exercise your rights, you can contact the Data Protection Officer at ALDREES using the below-mentioned contact details:

• Data Protection Officer
• Email: dpo@aldrees.com

15. Complaint or Objection Filing Method

If you have any concerns or if we do not comply with the Personal Data Protection Law, you can file a complaint with the Data Protection Officer at the contact details given above. If you are dissatisfied with how we process your complaint, or if we fail to respond within 30 days or fail to inform you regarding the number of days required to process your request (if >30), you can file a complaint with the Competent Authority, SDAIA, at the address below:

• Kingdom of Saudi Arabia, Riyadh.
• Website: Saudi Data & AI Authority
• National Data Governance Platform: DGP

16. Changes to Privacy Notice

We reserve the right to update this privacy notice at any time, and we will provide you with new privacy notice when we make any substantial updates. We will also notify you in other ways from time to time about the processing of your personal information.